Failed to add Microsoft 365 QR Code because colon character in account field

[abelmferreira]

Describe the bug
The Test feature returns an error in the advanced form when the account field contains a colon.
The qrcode generated by Microsoft also is not accepted by upload feature.
Removing the colon, the generated otp is not accpeted by Microsoft validation.
Related to issue #45

To Reproduce
Steps to reproduce the behavior:

Go to /account/create
Field the form with Account or Service with a colon
Click on Test
See error

Removing the colon, the validation step with the generated otp with Microsoft fail.

Example QR Code text generated by Microsoft
otpauth://totp/ORGANIZATION:account@domain.com?secret=xxxxxxFAKExxxxx&issuer=Microsoft

Expected behavior
An OTP password should be displayed and validation success

Additional context
Version 3.4.0 using docker hub image 2fauth/2fauth:3.4.0
Same error on version 3.3.3

Screenshots

[Bubka]

Regarding the validation step failure, please set the Secret field as base32 format and try again.

[Bubka]

Another point: unless specified (like in the given Microsoft example), algorithm is SHA1. You screen shows a SHA256 config.

[abelmferreira]

Thanks!
but i need remove the organization a colon parts from account field?

the print is with sha256, but I tested all the algorithms, including sha1, removing the organization and colon from account and validation fail.

the secret is a smaller string, like this generated now: "7yfnlbbyt2ldtsnw"
when i choose base32 i got this error: "The secret must be a base32 encoded string."

[Bubka]

Thanks!

but i need remove the organization a colon parts from account field?

You can, this has no impact on generated password.

the secret is a smaller string, like this generated now: "7yfnlbbyt2ldtsnw"

when i choose base32 i got this error: "The secret must be a base32 encoded string."

Simply uppercase the string, it should works.

[abelmferreira]

That's it!!!!! its working now!
Thanks! Your project is fantastic and your quick response was amazing!

For future searches
To manual add a Microsoft Authentication OTP

• In account field just put the e-mail address removing the organizarion and colon;
• Choose TOTP;
• Choose SHA1 algorithms;
• Select base32 secret type and put the given string in uppercase;